CVE-2026-86426: Improper Authentication

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...

AZL-99807 CVE-2026-80231 affecting package mysql 8.0.46-1

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

AZL-99795 CVE-2026-80229 affecting package mysql 8.0.46-1

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

AZL-99810 CVE-2026-80255 affecting package mysql 8.0.46-1

A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...

AZL-99792 CVE-2026-19931 affecting package mysql 8.0.46-1

A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...

AZL-99801 CVE-2026-18924 affecting package mysql 8.0.46-1

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

AZL-99813 CVE-2026-13608 affecting package mysql 8.0.46-1

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022289 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022292 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022349)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022349 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022334 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022324 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022280 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022313 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022343 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022304 advisory. Unity Link Advisory UTSA-2026-022304 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022354 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45,...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022285)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022285 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 a...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022322 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 a...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022335 advisory. Unity Link Advisory UTSA-2026-022335 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...